Event Id | 36189 |
Source | SCHANNEL |
Description | The SSL server credentials certificate does not have a private key information property attached to it. This most often occurs when a certificate is backed up incorrectly and then later restored. This message can also indicate a certificate enrollment failure. |
Event Information | According to Microsoft: CAUSE: During the export, each certificate is exported without the private key, so the SSL connections that use these certificates are unsuccessful if they are imported on the same server or on a different server for IIS. When certificates are exported on one computer without the private key, the certificate is rendered unusable. Therefore, exporting in .p7b format is not a valid solution for exporting certificates. RESOLUTION: To avoid the error message, Microsoft recommends that you export certificates on a one-by-one basis when you save the exported certificates.For this behavior to occur, you must follow these steps to export multiple certificates. To do this, follow these steps in the Certificates Microsoft Management Console (MMC): 1. Click Start, click Run, and then type MMC. 2. Click Console, click Add/Remove Snap-In, and then click Add. 3. Add the Certificates snap-in. 4. Click to select Local Computer, click Next two times, and then click Finish. 5. Click the personal folder, and then click Certificates. 6. Hold down the SHIFT key, and then click to select all of the certificates in the right MMC pane. 7. Type a name for the certificate. |
Reference Links | PRB: Exporting Multiple Certificates to .p7b Imports Bad Certificates on Second Computers |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.